Open Source Vulnerabilities
Kernel
selinux: allow FIOCLEX and FIONCLEX with policy capability
Kernel
selinux: allow FIOCLEX and FIONCLEX with policy capability
Kernel
block, bfq: don't move oom_bfqq
Kernel
memstick/mspro_block: fix handling of read-only devices
Kernel
memstick/mspro_block: fix handling of read-only devices
Kernel
hwrng: cavium - fix NULL but dereferenced coccicheck error
Kernel
hwrng: cavium - fix NULL but dereferenced coccicheck error
Kernel
bfq: fix use-after-free in bfq_dispatch_request
Kernel
Revert "Revert "block, bfq: honor already-setup queue merges""
Kernel
Revert "Revert "block, bfq: honor already-setup queue merges""
Kernel
PM: core: keep irq flags in device_pm_check_callbacks()
Kernel
PM: core: keep irq flags in device_pm_check_callbacks()
Kernel
ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit
Kernel
ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit
Kernel
spi: fsi: Implement a timeout for polling status
Kernel
parisc: Fix non-access data TLB cache flush faults
Kernel
ext4: don't BUG if someone dirty pages without asking ext4 first
Kernel
ext4: don't BUG if someone dirty pages without asking ext4 first
Kernel
f2fs: fix to do sanity check on curseg->alloc_type
Kernel
f2fs: use spin_lock to avoid hang
Kernel
btrfs: do not clean up repair bio if submit fails
Kernel
btrfs: do not double complete bio on errors during compressed reads
Kernel
btrfs: do not double complete bio on errors during compressed reads
Kernel
btrfs: make search_csum_tree return 0 if we get -EFBIG
Kernel
btrfs: make search_csum_tree return 0 if we get -EFBIG
Kernel
btrfs: handle csum lookup errors properly on reads
Kernel
ntfs: add sanity check on allocation size
Kernel
media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com
Kernel
media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com
Kernel
media: staging: media: zoran: move videodev alloc
Kernel
media: ir_toy: free before error exiting
Kernel
media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers
Kernel
media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers
Kernel
video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
Kernel
video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
Kernel
video: fbdev: cirrusfb: check pixclock to avoid divide by zero
Kernel
video: fbdev: cirrusfb: check pixclock to avoid divide by zero
Kernel
powerpc/tm: Fix more userspace r13 corruption
Kernel
powerpc/kasan: Fix early region not updated correctly
Kernel
powerpc/kasan: Fix early region not updated correctly
Kernel
KVM: x86/mmu: Zap _all_ roots when unmapping gfn range in TDP MMU
Kernel
KVM: x86/mmu: Zap _all_ roots when unmapping gfn range in TDP MMU
Kernel
drm/dp: Fix off-by-one in register cache size
Kernel
ARM: mmp: Fix failure to remove sram device
Kernel
media: imx-jpeg: fix a bug of accessing array out of bounds
Kernel
media: imx-jpeg: fix a bug of accessing array out of bounds
Kernel
media: atomisp: fix dummy_ptr check to avoid duplicate active_bo
Kernel
media: atomisp: fix dummy_ptr check to avoid duplicate active_bo
Kernel
video: fbdev: sm712fb: Fix crash in smtcfb_write()
Kernel
mmc: host: Return an error when ->enable_sdio_irq() ops is missing
Kernel
mmc: host: Return an error when ->enable_sdio_irq() ops is missing
Kernel
ASoC: mediatek: Fix error handling in mt8183_da7219_max98357_dev_probe
Kernel
ASoC: mediatek: Fix error handling in mt8183_da7219_max98357_dev_probe
Kernel
scsi: qla2xxx: Fix crash during module load unload test
Kernel
scsi: qla2xxx: Fix crash during module load unload test
Kernel
drm/i915: Treat SAGV block time 0 as SAGV disabled
Kernel
scsi: qla2xxx: Implement ref count for SRB
Kernel
scsi: qla2xxx: Fix warning message due to adisc being flushed
Kernel
scsi: qla2xxx: Fix warning message due to adisc being flushed
Kernel
scsi: qla2xxx: Fix premature hw access after PCI error
Kernel
scsi: qla2xxx: Fix premature hw access after PCI error
Kernel
scsi: qla2xxx: Fix scheduling while atomic
Kernel
KVM: x86/mmu: do compare-and-exchange of gPTE via the user address
Kernel
KVM: x86/mmu: do compare-and-exchange of gPTE via the user address
Kernel
scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair()
Kernel
scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair()
Kernel
ubifs: rename_whiteout: Fix double free for whiteout_ui->data
Kernel
ubifs: rename_whiteout: Fix double free for whiteout_ui->data
Kernel
ubifs: Fix deadlock in concurrent rename whiteout and inode writeback
Kernel
ubifs: Fix deadlock in concurrent rename whiteout and inode writeback
Kernel
ubifs: Fix 'ui->dirty' race between do_tmpfile() and writeback work
Kernel
ubifs: Fix 'ui->dirty' race between do_tmpfile() and writeback work
Kernel
KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast()
Kernel
KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast()
Kernel
ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock()
Kernel
ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock()
Kernel
KVM: SVM: fix panic on out-of-bounds guest IRQ
Kernel
ubifs: Fix to add refcount once page is set private
Kernel
ubifs: Fix to add refcount once page is set private
Kernel
wireguard: socket: free skb in send6 when ipv6 is disabled
Kernel
wireguard: socket: free skb in send6 when ipv6 is disabled
